The embodiments of the invention in which an exclusive property or privilege is 
claimed are defined as follows: 

1. A method for controlling modifications to user choice settings, the method 
comprising: 

storing a user choice setting as a protected value that is secured by an access control 
indicator; 

receiving an input from a user authorizing an application to modify the user choice 
setting on the user's behalf; 

modifying the access control indicator to permit writing to the protected value; 

modifying the user choice setting by writing a modified user choice setting to the 
protected value; and 

restoring the access control indicator to prevent writing to the protected value. 

2. The method of Claim 1, wherein the protected value is a registry key stored in 
the Windows® registry and the access control indicator is an access control list (ACL) that 
has been initialized to prevent writing to the protected value. 

3. The method of Claim 2, wherein modifying the access control indicator to 
permit writing to the protected value includes providing to the user rights to modify the ACL 
in accordance with the security subsystem of the Windows® operating system. 

4. The method of Claim 3, wherein modifying the access control indicator to 
permit writing to the protected value includes providing to the user ownership of the registry 
key that the ACL secures, wherein ownership of the registry key automatically provides to 
the user rights to modify the ACL in accordance with the security subsystem of the 
Windows® operating system. 

5. The method of Claim 4, wherein modifying the access control indicator to 
permit writing to the protected value includes allowing the user to temporarily take 
ownership of the registry key that the ACL secures after receiving the input from the user 
authorizing the application to modify the user choice setting on the user's behalf. 
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6. The method of Claim 3, wherein restoring the access control indicator to 
prevent writing to the protected value includes removing user rights to modify the ACL in 
accordance with the security subsystem of the Windows® operating system. 

7. The method of Claim 6, wherein removing user rights to modify the ACL 
includes returning ownership of the registry key that the ACL secures to the Windows® 
operating system. 

8. The method of Claim 1 , further comprising: 
generating a user choice setting user interface (UI); 

displaying the current user choice setting on the UI along with other options for the 
user choice setting; and 

receiving the authorizing input from the UI, along with a further input indicating a 
modified user choice setting including at least one of the other displayed options for the user 
choice setting. 

9. The method of Claim 1 , further comprising generating a change notification to 
the user whenever the user choice setting has been modified, the change notification 
identifying the application that modified the user setting and the contents of the protected 
value before and after the modification. 

10. The method of Claim 1, wherein the user choice settings include at least one 
of a user preference relating to a file association, an autoplay setting, contents of a start 
menu, a registered client setting, a protocol handler, a MIME type handler, a task association, 
a Web browser home page, a reset Web page setting, and a sidebar setting. 

11. The method of Claim 10, wherein the registered client setting includes at least 
one of a Web browser, e-mail, media player, instant messaging, and virtual machine for Java 
setting. 

12. A system for communicating user choice settings between an application and 
a registry for storing the user choice settings, the system comprising: 
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a registry for storing a user choice setting as a protected value in a registry key; 

an access control list (ACL) for securing the registry key; 

an interface to control modifications to the user choice setting; and 

an application issuing a request to modify the user choice setting via the interface, the 
interface obtaining an approval of the request from a user; the interface further modifying the 
ACL to permit writing to the protected value in the registry key upon obtaining the approval, 
the interface further writing to the protected value the modified user choice setting; and the 
interface further restoring the ACL to prevent writing to the protected value in the registry 
key after writing the modified user choice setting. 

13. The system of Claim 12, the interface further notifying the user whenever the 
interface writes to the protected value, including notifying the user of a content of the 
protected value before and after the interface writes to the protected value and further 
notifying the user which application requested the modification. 

14. The system of Claim 12, wherein the user choice setting is at least one of a 
user preference relating to a file association, an autoplay setting, contents of a start menu, a 
registered client setting, a protocol handler, a MIME type handler, a task association, a Web 
browser home page, a reset Web page setting, and a sidebar setting. 

15. The system of Claim 14, wherein the registered client setting includes at least 
one of a Web browser, e-mail, media player, instant messaging, and virtual machine for Java 
setting. 

16. The system of Claim 12, wherein modifying the ACL to permit writing to the 
protected value in the registry key includes providing to the user rights to modify the ACL in 
accordance with the security subsystem of the Windows® operating system. 

17. The system of Claim 12, wherein modifying the ACL to permit writing to the 
protected value in the registry key includes providing to the user ownership of the registry 
key, wherein ownership of the registry key automatically provides to the user rights to 
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modify the ACL in accordance with the security subsystem of the Windows® operating 
system. 

18. The system of Claim 12, wherein modifying the ACL to permit writing to the 
protected value in the registry key includes allowing the user to temporarily take ownership 
of the registry key after receiving the user approval authorizing the application to modify the 
user choice setting on the user's behalf. 

19. A computer-accessible medium having components for safely modifying a 
user's preferences for when and how an application is to operate on the user's computer, the 
medium comprising instructions to: 

store a user choice setting as a protected value that is secured by an access control 
indicator; 

receive an input from a user authorizing an application to modify the user choice 
setting on the user's behalf; 

unlock the protected value to permit writing to the protected value; 

modify the user choice setting by writing a modified user choice setting to the 
unlocked protected value; and 

lock the protected value to prevent writing to the protected value. 

20. The computer-accessible medium of Claim 19, wherein the protected value is 
a registry key stored in the Windows® registry and the instruction to unlock the protected 
value to permit writing to the protected value includes an instruction to modify an access 
control list (ACL) that has been initialized to prevent writing to the protected value. 

21. The computer-accessible medium of Claim 20, wherein the instruction to 
modify the ACL to permit writing to the protected value includes an instruction to provide to 
the user rights to modify the ACL in accordance with the security subsystem of the 
Windows® operating system. 

22. The computer-accessible medium of Claim 20, wherein the instruction to 
modify the ACL to permit writing to the protected value includes an instruction to provide to 
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the user ownership of the registry key that the ACL secures, wherein ownership of the 
registry key automatically provides to the user rights to modify the ACL in accordance with 
the security subsystem of the Windows® operating system. 

23. The computer-accessible medium of Claim 20, wherein the instruction to 
modify the ACL to permit writing to the protected value includes an instruction to allow the 
user to temporarily take ownership of the registry key that the ACL secures after receiving 
the input from the user authorizing the application to modify the user choice setting on the 
user's behalf. 

24. The computer-accessible medium of Claim 20, wherein the instruction to lock 
the ACL to prevent writing to the protected value includes an instruction to remove user 
rights to modify the ACL in accordance with the security subsystem of the Windows® 
operating system. 

25. The computer-accessible medium of Claim 24, wherein the instruction to 
remove user rights to modify the ACL includes an instruction to return ownership of the 
registry key that the ACL secures to the Windows® operating system. 

26. The computer-accessible medium of Claim 19, further comprising instructions 

to: 

generate a user choice setting user interface (UI); 

display the current user choice setting on the UI along with other options for the user 
choice setting; and 

receive the authorizing input from a user via the UI along with a further input 
indicating a selection of a modified user choice setting including a selection of at least one of 
the other displayed options for the user choice setting. 

27. The computer-accessible medium of Claim 19, further comprising instructions 
to generate a change notification to the user whenever the user choice setting has been 
modified, the change notification identifying the application that modified the user setting 
and the contents of the protected value before and after the modification. 
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28. The computer-accessible medium of Claim 19, wherein the user choice 
settings include at least one of a user preference relating to a file association, an autoplay 
setting, contents of a start menu, a registered client setting, a protocol handler, a MIME type 
handler, a task association, a Web browser home page, a reset Web page setting, and a 
sidebar setting. 

29. The computer-accessible medium of Claim 28, wherein the registered client 
setting includes at least one of a Web browser, e-mail, media player, instant messaging, and 
virtual machine for Java setting. 
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